Do Son Steam is ending support for macOS 11 Big Sur on October 15. Due to security risks, users must upgrade their OS to continue using the platform.
macOS
With macOS Sequoia, Apple introduces a native containerization system, enabling security professionals to run Kali Linux directly on Apple Silicon for penetration testing without needing Docker.
Microsoft discovered "Sploitlight" (CVE-2025-31199), a macOS flaw exploiting Spotlight plugins to bypass TCC, leading to private data exfiltration, including Apple Intelligence cached info.
Apple introduces more granular age ratings for the App Store, enhancing family safety tools and requiring developers to complete new content questionnaires by Jan 2026.
Jamf Threat Labs has uncovered a sophisticated new macOS infostealer variant that managed to bypass Apple’s security defenses by leveraging valid code signing and notarization
Darktrace uncovers a crypto scam using fake software startups (AI, gaming, Web3 themes) with professional online presences to distribute Electron malware (Windows) and Atomic Stealer (macOS) for crypto theft.
SentinelOne uncovers a new macOS.ZuRu variant using a trojanized Termius app. It gains persistence via LaunchDaemon and deploys a Khepri C2 beacon for remote control.
AMOS malware just leveled up—now a backdoor, it poses a serious threat to macOS with persistent access and remote command execution.
North Korean APTs are using "NimDoor," a new Nim-based macOS malware, to target Web3/crypto startups via fake Zoom meetings, stealing browser, Keychain, and Telegram data with novel persistence.
A new macOS information stealer, a potential AMOS variant, targets crypto users and Ledger Live accounts, stealing passwords and wallet data using stealthy daemonization and local admin prompt tactics.
Apple's iOS 26 will introduce automatic synchronization of public Wi-Fi logins across all Apple devices, simplifying connectivity for users on captive networks.
CYFIRMA uncovers "Odyssey Stealer," a new macOS malware using fake App Store prompts & typosquatting to steal crypto wallets, passwords, and browser data from Western users.
iOS 26 is testing "Captive Assist," a new feature to synchronize public Wi-Fi logins across all your Apple devices, streamlining access to captive networks.
North Korean APT BlueNoroff (TA444) exploited deepfakes in Zoom calls to trick a crypto foundation employee into installing custom macOS malware for digital asset theft.
3DMark is now natively available for macOS, offering accurate performance benchmarking for Apple Silicon Macs with Wild Life Extreme, Solar Bay, and Steel Nomad tests.
A flaw (CVE-2025-4232) in GlobalProtect for macOS allows local users to escalate to root. Public PoC code exists. Update now!
A new AMOS macOS stealer variant is using typo-squatted Spectrum domains in a clever cross-platform social engineering campaign. Stay vigilant!
Apple plans a major SwiftUI overhaul at WWDC 2025, simplifying rich text and web content integration for developers.
Apple patches a CoreAudio flaw exploited in the wild via malicious media files, enabling remote code execution. PoC now on GitHub.
A low-severity flaw in Apache Tomcat (CVE-2025-46701) allows security constraint bypass via crafted URLs on case-insensitive file systems. Update now!
AppleProcessHub, a new macOS infostealer, uses an Objective-C dropper and AES-decrypted C2 to steal sensitive files like SSH keys and Keychain.
PoC for CVE-2023-41992 reveals iOS kernel flaw enabling local privilege escalation. Apple patched it, but risks persist for outdated devices.